General

  • Target

    74422a01f61c9ce0c5a7d4380fdfbc96_JaffaCakes118

  • Size

    68KB

  • MD5

    74422a01f61c9ce0c5a7d4380fdfbc96

  • SHA1

    304d563970c83f274be6e69514b54a7e26cfe189

  • SHA256

    b11bcb13ebf47bbe4a363297106465070e650f0c9b065b4a9ffb115028073963

  • SHA512

    4c62e6aeff0ae4acaa04675dd56bce554d9c0387f9a1a996af13784970a926068c89744517074b1702da65515e877a6b20a2450c1bd2540a02ed82725540aed3

  • SSDEEP

    1536:qlBUn3edi35Jz5yOf2JvLhVNIADKhVQ5Tg6BKn49o:ql+3ekHz5yIiVKAOhYBKnyo

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 74422a01f61c9ce0c5a7d4380fdfbc96_JaffaCakes118
    .dll .hta regsvr32 windows:4 windows x86 arch:x86 polyglot


    Code Sign

    Headers

    Exports

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections